Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
File: fHvscgXfiNB3CG9Kj7WuznXLtmE.mft (raw, json)
Hash identifier: L/NtZXQSsIub6nkv30bvJB7SjxdwAa2yuoAwkEdZp7g=
Subject key identifier: 31:A8:7C:DD:B2:87:6A:E7:05:E9:61:65:A4:64:C5:D4:FF:36:BD:C9
Authority key identifier: 7C:7B:EC:72:05:DF:88:D0:77:08:6F:4A:8F:B5:AE:CE:75:CB:B6:61
Certificate issuer: /CN=7c7bec7205df88d077086f4a8fb5aece75cbb661
Certificate serial: 019D25F15FE2E0D7E65EC3E10FA54A547A14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
Manifest number: 16DA
Signing time: Wed 25 Mar 2026 17:01:08 +0000
Manifest this update: Wed 25 Mar 2026 17:01:08 +0000
Manifest next update: Thu 26 Mar 2026 17:01:08 +0000
Files and hashes: 1: fHvscgXfiNB3CG9Kj7WuznXLtmE.crl (hash: Z0xhBCd148CSYJv9Lk/+87M0BYDwZkM6db9CmLWFBZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:5f:e2:e0:d7:e6:5e:c3:e1:0f:a5:4a:54:7a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c7bec7205df88d077086f4a8fb5aece75cbb661
Validity
Not Before: Mar 25 17:01:08 2026 GMT
Not After : Mar 26 17:01:08 2026 GMT
Subject: CN=31a87cddb2876ae705e96165a464c5d4ff36bdc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c9:6f:cb:45:35:e4:c0:1f:ab:dd:af:86:7d:
58:20:02:ab:8e:26:24:3e:92:ad:2b:98:63:f4:b4:
00:9e:36:12:09:bb:0f:c5:3a:b6:58:7e:41:fc:ab:
93:a6:11:c1:f6:bf:af:df:99:b4:71:b9:73:43:d2:
97:f3:17:8d:47:65:73:d4:16:f5:44:4c:3f:e0:af:
e3:e8:a6:df:40:66:ac:d9:89:86:84:93:d9:8f:87:
37:38:dc:c7:dc:72:31:ae:75:55:80:bc:82:6c:27:
ff:de:e2:72:d3:cf:d2:ed:cb:c9:a7:7e:39:c9:24:
85:83:74:29:b3:60:47:5c:71:11:37:11:f4:61:bc:
f8:2c:9b:6f:40:11:d3:ef:96:a0:c3:f9:76:4f:48:
cb:0c:3a:b7:58:91:21:42:a7:59:63:48:ad:0a:a1:
e7:a0:82:1e:1c:4a:a1:b2:80:82:22:73:6e:c4:cb:
8c:40:5c:ea:80:6d:9f:37:82:d8:ab:c8:7d:84:d2:
97:ba:ab:38:c4:9d:6d:f1:95:ad:0e:49:04:56:4d:
81:51:0e:6b:fd:59:f4:4f:ab:bc:5b:47:72:40:8a:
41:d4:1c:bc:37:a0:18:f5:bc:c9:59:81:9e:6e:7d:
07:1d:ac:57:c8:a1:0b:fa:15:29:52:cc:85:b3:0d:
cb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A8:7C:DD:B2:87:6A:E7:05:E9:61:65:A4:64:C5:D4:FF:36:BD:C9
X509v3 Authority Key Identifier:
keyid:7C:7B:EC:72:05:DF:88:D0:77:08:6F:4A:8F:B5:AE:CE:75:CB:B6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:40:42:b1:7e:c0:bb:70:b4:54:9f:28:92:8b:63:9b:95:84:
73:88:a0:dd:aa:e8:d5:eb:cf:f9:09:ba:61:34:3e:53:35:46:
4d:e9:a9:62:74:47:92:60:5b:fc:7d:fb:84:13:31:ab:bc:69:
6e:d5:9a:b2:3d:20:62:47:8b:d6:86:14:32:e7:8f:05:0f:e2:
6f:3a:45:35:07:2f:2c:6a:fe:ad:50:83:ce:17:15:e1:3d:2a:
c0:7a:cc:44:19:97:06:d5:85:c9:74:1b:17:c7:08:2f:cc:9d:
0b:d1:4a:1a:39:89:94:90:2e:df:18:a3:b6:6a:ab:cc:fd:f1:
23:1f:36:1f:55:b7:bc:69:50:82:be:42:00:db:8b:3b:74:05:
d5:83:d4:d3:1e:ee:6d:c7:0f:63:5c:34:c4:41:cc:c0:bc:3f:
66:24:36:ad:19:13:8d:f0:c9:44:c6:4a:d5:cd:7e:a9:0a:fd:
49:02:f9:ae:ed:02:9d:74:9a:c1:61:ce:36:77:0d:dc:47:22:
b1:0a:e2:22:cd:5f:0f:0a:3b:69:22:93:8c:e8:9d:9b:e3:26:
b7:66:01:82:f5:fa:76:05:d0:5f:52:53:42:7f:a4:5b:af:85:
d8:2a:1f:c2:e0:97:9f:6c:f3:fa:49:1e:1a:c0:ea:22:f4:35:
21:17:13:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:46 2026 by rpki-client